Cameron USES Low Orbit Ion Cannon
Cam says he began using LOIC to attack opponents after learning how to disconnect them from the internet.
Explicit Confidence 99% · Cameron EP 62 Details
“I started LOIC.”
Episode
31 March 2020 Official episode · Official transcript
black hat hacktivism botnet
The episode follows Cam, a teenage gamer who progressed from using LOIC against online opponents to DDoS attacks associated with animal-rights hacktivism, was arrested and convicted in the UK, and later entered cybersecurity through rehabilitation and apprenticeship programs.
Topics: Denial-of-service and distributed denial-of-service attacks, LOIC packet flooding, Stressor-based DDoS-as-a-service, Peer-to-peer console networking, IP address discovery through deceptive links, Network traffic sniffing, NTP reflection and amplification, IP spoofing, Null routing as DDoS mitigation, Content delivery networks as defensive infrastructure, SIEM monitoring, Firewall management, Cybersecurity rehabilitation and youth apprenticeship programs, Capture the Flag competitions, Bug bounties
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Cameron USES Low Orbit Ion Cannon
Cam says he began using LOIC to attack opponents after learning how to disconnect them from the internet.
Explicit Confidence 99% · Cameron EP 62 Details
“I started LOIC.”
Low Orbit Ion Cannon USES denial-of-service attack
Jack explains that LOIC is used to flood an IP address and perform a denial-of-service attack.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“This is called a denial-of-service attack, or DoS”
Cameron USES Malicious link lure
Cam used a deceptive link, presented as evidence of wrongdoing, to persuade opponents to click it.
Derived Confidence 97% · Jack Rhysider EP 62 Details
“His plan was to send his victim a link to a website that he had control over”
Cameron USES Network traffic sniffing
Cam connected the PlayStation through a computer and sniffed traffic to identify opponents' IP addresses.
Derived Confidence 98% · Jack Rhysider EP 62 Details
“he’d watch all the IP addresses connecting to his PS3 in the game”
Cam says another participant in Operation Fun Kill gave him a free stressor, which he used to conduct attacks.
Explicit Confidence 99% · Cameron EP 62 Details
“I was given a free stressor by someone that I knew.”
Stressor USES denial-of-service attack
Jack characterizes a stressor as denial-of-service delivered as a service.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“A stressor is simple DoS as a service”
Jack says a stressor provider may set up a botnet or servers to send large volumes of traffic.
Derived Confidence 96% · Jack Rhysider EP 62 Details
“someone sets up a botnet or a bunch of servers capable of sending gigs and gigs of data”
Operation Fun Kill PART_OF Anonymous
Cam describes Operation Fun Kill as part of an Anonymous operation.
Explicit Confidence 99% · Cameron EP 62 Details
“he was involved in Operation Fun Kill which is part of like, Anonymous Operation”
Operation Fun Kill TARGETS SeaWorld
Cam says Operation Fun Kill involved attacks against SeaWorld and related animal-rights targets.
Explicit Confidence 97% · Cameron EP 62 Details
“he was involved in Operation Fun Kill which is part of like, Anonymous Operation. It has to do with Sea World”
Cam repeatedly used denial-of-service attacks against SeaWorld because of his objections to its treatment of animals.
Explicit Confidence 98% · Cameron EP 62 Details
“I just basically started pressing buttons.”
“Sea World. He just sends me this entire attack list that they’re all going for.”
SeaWorld DDoS INVOLVES Stressor
The SeaWorld DDoS incident involved Cam using a stressor to attack the organization's website.
Derived Confidence 98% · Jack Rhysider EP 62 Details
“He would access the stressor, put in an IP of one of the animal parks, and start hitting it hard”
SeaWorld DDoS INVOLVES denial-of-service attack
The incident involved denial-of-service attacks that knocked SeaWorld websites offline.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“he was knocking websites offline with a few simple clicks of a button with a denial-of-service attack”
SeaWorld DDoS TARGETS SeaWorld
The named SeaWorld DDoS incident targeted SeaWorld websites.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“He continued to DDoS Sea World over and over.”
Cameron USES NTP amplification attack
Cam used an NTP amplification attack against the Devon and Cornwall Police website.
Explicit Confidence 99% · Cameron EP 62 Details
“I DDossed it, sorry, with an NTP attack.”
Devon and Cornwall Police website DDoS INVOLVES NTP amplification attack
The Devon and Cornwall Police website DDoS involved an NTP amplification attack.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“For this one, he had his own dedicated server doing an NTP amplification attack.”
Devon and Cornwall Police website DDoS TARGETS Devon and Cornwall Police
The incident targeted the Devon and Cornwall Police website.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“He launched it against the police department in his own town”
Devon and Cornwall Police website DDoS INVOLVES Null routing
Jack says the website may have remained down because police IT staff null-routed the incoming traffic, but presents this as a likelihood rather than a confirmed fact.
Uncertain Confidence 89% · Jack Rhysider EP 62 Details
“What likely happened was that somebody within the IT team at the police station just null-routed this incoming traffic”
Cameron MEMBER_OF Cyber Security Associates
Cam works at Cyber Security Associates as a senior SOC analyst / security professional.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“Cam got the job at CSA”
“I’m a senior SOC analyst.”
Sean Tickle MEMBER_OF Cyber Security Associates
Sean identifies himself as the SOC manager at Cyber Security Associates.
Explicit Confidence 99% · Sean Tickle EP 62 Details
“I’m the SOC manager at the CSA which is Cyber Security Associates.”
Cameron USES Security Information and Event Manager
Cam's apprenticeship included monitoring a Security Information and Event Manager system.
Explicit Confidence 98% · Cameron EP 62 Details
“they gave me an apprenticeship in networking security and then monitoring on the SIEM”
Cam says his security work included firewall management.
Explicit Confidence 98% · Cameron EP 62 Details
“we did like, SIEM monitoring, firewall management”
Cyber Security Associates ASSOCIATED_WITH National Cyber Security Centre
CSA partnered with the NCSC to create a cyber-zone and teach students about cybersecurity.
Explicit Confidence 99% · Jack Rhysider EP 62 Details
“the NCSC partnered with CSA to help hold classes and teach students and teenagers more about cyber-security”
Bomb-threat allegations against US targets ASSOCIATED_WITH Cameron
Cam was convicted in connection with the bomb-threat allegations, although he says he had nothing to do with them and denied sending the relevant tweet.
Uncertain Confidence 87% · Cameron EP 62 Details
“I got charged for the bomb threats as well.”
“He tells me he had nothing to do with these bomb threats”
Bomb-threat allegations against US targets INVOLVES FBI
The bomb-threat allegations included threats against the FBI, according to Cam's account of the charges.
Explicit Confidence 99% · Cameron EP 62 Details
“there were bomb threats made against Delta Airlines, American Airlines, the White House, and the FBI.”
Bomb-threat allegations against US targets INVOLVES United States Secret Service
The Secret Service became involved in the case and sought Cam's extradition, according to Cam.
Explicit Confidence 93% · Cameron EP 62 Details
“the Secret Service and the FBI, I believe they put in two requests to get me extradited”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T06:21:54.544479+00:00